SBS 2000 and Exchange 2000 Creating Large Amounts of Spam

  • From: "Richard Parsons" <rick@xxxxxxxxxxxxxxxxxx>
  • To: exchangelist@xxxxxxxxxxxxx
  • Date: Mon, 8 Sep 2003 09:05:05 -0600

I am running SBS 2000 which includes Exchange 2000 Server together with
ISA server 2000 as a package it works well, Suddenly all is not well my
system seems to have been hijacked.

When checking the server (because of a mail go slow) I discovered the SMTP
virtual server Outbound queue full of SPAM (ie the standard "viagra", "get
out of debt", "porn chick" stuff, addressed to aol, hotmail, and many
others etc).

After eliminating all other sources, ie scanning all PC's for viruses,
disconnecting all workstations from the network,and the server from my
adsl connection etc, I have discovered that the server seems to be
creating the spam itself. This is based on the fact that the server is now
totally disconnected from the network and the internet(ethernet cables
unplugged), the queue has been deleted, and as soon as I restart the SMTP
service, within a minute there are a 1000 email messages in the queue.

I have double checked that my server is not acting as a third party
relay,(and it is not) The Server Has all patches/latest updates/sbssp1/sp4
for wk2/sp3 for exch2k etc,etc

I have run a thourough virus scan on the server, but found nothing.

When I stop the SMTP service, the messages stop being generated, as soon
as I start it again, the messages start being generated.

Any idea's PLEASE ! 

Other related posts: